Beveiligingsadvies

CVE-2026-47084

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-16 00:00:00

Laatst bijgewerkt 2026-07-16 18:53:38

Toegewezen door mitre

CVSS-score 6.5

Status PUBLISHED

Beschrijving

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

← Alle CVE's bekijken Bekijk op cve.org ↗